1. Introduction
1.1. Overview
The IEEE 802.11b Hotspot Access Gateway enables wireless ISPs, enterprises, or schools to deploy
WLANs with user authentication support. Authentication can be achieved using the
Web redirection
technology or IEEE 802.1x Port-Based Network Access Control.
Based on the Web redirection technology, when an unauthenticated wireless user is trying to access a
Web page, a logon page is shown instead of the requested page, so that the user can type his/her user
name and password for authentication. Based on IEEE 802.1x, after a wireless client computer asso-
ciates with the built-in access point of the access gateway, the wireless client computer uses the
logged-on user’s
user credential
for authentication. The user credential can be user name/password (if
EAP-MD5 is used) or digital certificate (if EAP-TLS is used).
After the access gateway acquires the user credential either through Web redirection or IEEE 802.1x,
it sends the user credential to a back-end RADIUS (Remote Authentication User Dial-In Service)
server to see if the wireless user is allowed to access the Internet. Furthermore, if a user is IEEE
802.1x EAP-TLS authenticated, wireless data transmitted between the access gateway and the wire-
less client computer can be encrypted for better security.
In Chapter 2, we describe the steps to install and configure a newly acquired WLAN hotspot access
gateway. Following the steps, the WLAN hotspot access gateway can be quickly set up to work. In
Chapter 3, detailed explanations of each Web management page are given for the user to understand
how to fine-tune the settings of a WLAN hotspot access gateway to meet his or her specific needs. In
the remainder of this guide, a WLAN hotspot access gateway is referred to as a
gateway
for short.
1.2. Features
User Authentication, Authorization, and Accounting (AAA)
When an unauthenticated wireless user is trying to access a Web page,
he/she is redirected to a logon page for entering the user name and password. Then, the
user credential information is sent to a back-end RADIUS server for authentication.
Local pages or external pages.
The access gateway can be configured to use
log-on
,
log-off
,
authentication success
, and
authentication failure
pages, which are
stored in itself or stored in an external Web server maintained by the WISP. The con-
tents of local authentication pages can be
Username/password information can be sent by di-
rectly calling a CGI (Common Gateway Interface) function on the access gateway.
This feature is useful for authentication automation achieved by a specifically de-
signed program running on the wireless client computer.
The
log-off
authentication page can be configured to show a
sequence of advertisement banners.
Client computers with specific IP addresses or MAC ad-
dresses can bypass the Web redirection-based access control. The MAC address list
can be uploaded by TFTP.
1
Содержание IWE1200A-G
Страница 1: ...USER S MANUAL...
Страница 14: ...7...
Страница 72: ...Fig 95 Advertisement links settings Fig 96 Advertisement links in action 65...
